General
-
Target
2024-03-26_f73023ad8efd9d279e1d338915e8988c_cryptolocker
-
Size
125KB
-
Sample
240326-l3h9faaf31
-
MD5
f73023ad8efd9d279e1d338915e8988c
-
SHA1
9d435b3e35a9f2b1247c7be192351b70ddcd56f0
-
SHA256
af8220992af4d7f5f484724a50fdaf3baee3761f582d633f1e0a685b5aeeb557
-
SHA512
5cf8d09c3836358abe57791062d580c3dac8abaa20d919fb51a55b38a323a64f6ab8444a863bb26666205d41ee87581a4930756edb3af7b3500a17e1a1101f17
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgdlo:u6a++OtEvwDpj6z8
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_f73023ad8efd9d279e1d338915e8988c_cryptolocker.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-26_f73023ad8efd9d279e1d338915e8988c_cryptolocker.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-03-26_f73023ad8efd9d279e1d338915e8988c_cryptolocker
-
Size
125KB
-
MD5
f73023ad8efd9d279e1d338915e8988c
-
SHA1
9d435b3e35a9f2b1247c7be192351b70ddcd56f0
-
SHA256
af8220992af4d7f5f484724a50fdaf3baee3761f582d633f1e0a685b5aeeb557
-
SHA512
5cf8d09c3836358abe57791062d580c3dac8abaa20d919fb51a55b38a323a64f6ab8444a863bb26666205d41ee87581a4930756edb3af7b3500a17e1a1101f17
-
SSDEEP
1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgdlo:u6a++OtEvwDpj6z8
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-